Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39352e302f32342d3234203d3e20313939343837.roa
File:                     3139302e39332e39352e302f32342d3234203d3e20313939343837.roa (raw, json)
Hash identifier:          i0+TLEnsw3VQ6nzt3uYspE+nYbpW2br+A6hrYQAK//U=
Subject key identifier:   A6:F5:F8:22:C2:AA:17:F1:E1:4B:66:8A:D8:6C:1F:05:9F:34:0B:28
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       2898C86DBEA714ADF985FA6755270E7BBEB757D4
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39352e302f32342d3234203d3e20313939343837.roa
Signing time:             Wed 28 May 2025 12:20:12 +0000
ROA not before:           Wed 28 May 2025 12:15:12 +0000
ROA not after:            Wed 27 May 2026 12:20:12 +0000
asID:                     199487
IP address blocks:        190.93.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:98:c8:6d:be:a7:14:ad:f9:85:fa:67:55:27:0e:7b:be:b7:57:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: May 28 12:15:12 2025 GMT
            Not After : May 27 12:20:12 2026 GMT
        Subject: CN=A6F5F822C2AA17F1E14B668AD86C1F059F340B28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4f:66:48:30:e4:68:69:ae:e4:27:3a:5f:3f:
                    10:a6:b8:46:0d:c1:01:d7:b1:5a:6a:a3:5f:41:d6:
                    85:4e:5c:76:2c:0c:29:cf:04:d1:58:c6:f5:2e:26:
                    f9:58:26:c7:8c:c3:f0:26:06:17:31:26:25:63:66:
                    ac:d0:c8:72:7f:89:84:dc:2d:69:d5:19:f5:96:4e:
                    e4:10:3d:e7:f4:44:43:1d:af:10:2e:c7:0e:8e:69:
                    07:98:64:84:61:7c:ea:bf:7f:c9:43:04:ea:6c:76:
                    74:3a:00:a0:cc:55:5d:b3:e5:f1:a3:40:56:e7:63:
                    91:3c:e9:ed:92:22:44:2a:ca:fe:8b:8d:80:5c:15:
                    c1:9e:dc:71:83:bf:45:cc:e5:83:78:3b:8d:8c:91:
                    71:14:75:4e:9c:1c:7e:fd:c6:a6:82:30:44:a3:94:
                    28:9d:08:75:11:92:58:e3:21:41:f3:1b:4e:da:eb:
                    e8:4c:bc:57:70:d8:40:11:e9:30:32:33:ec:13:9c:
                    51:23:1b:b4:1c:0f:cb:b7:d3:ac:86:2c:8c:4c:c8:
                    fc:53:f5:2c:aa:45:9f:5d:13:f7:4e:52:87:e9:3a:
                    25:cb:c1:64:67:e5:88:bd:31:1d:82:c7:6c:e4:15:
                    0b:48:23:0d:ed:b7:30:7f:55:37:8d:64:08:f3:70:
                    e6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F5:F8:22:C2:AA:17:F1:E1:4B:66:8A:D8:6C:1F:05:9F:34:0B:28
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39352e302f32342d3234203d3e20313939343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:13:43:0f:29:9e:49:b6:de:24:6b:e6:fb:60:3c:a3:32:39:
         8b:7b:79:ac:b3:79:9b:1f:34:85:b0:2c:13:f5:e4:55:6f:1a:
         c9:bd:45:cd:3e:eb:5a:48:c9:a3:74:62:e0:e3:e3:5b:54:f6:
         d9:2b:d3:eb:92:d1:27:18:65:3c:55:c9:32:99:ec:08:f9:3c:
         d2:21:dd:71:06:32:a8:ad:b1:e5:58:d9:fd:a5:e9:7f:ba:db:
         18:fa:9a:15:67:6a:60:7f:de:46:40:9f:5e:b2:ce:70:84:87:
         40:43:49:80:a4:0b:e6:10:58:30:f1:75:b8:53:23:7b:c5:ff:
         f8:eb:79:42:45:1d:6f:90:88:b5:9a:cd:c8:af:3a:aa:59:33:
         10:a4:2f:3b:0c:65:fc:4e:b2:a9:11:9f:7e:5d:d0:85:81:6a:
         f4:46:48:19:8f:02:9f:bb:5c:f9:9b:86:0b:58:83:81:27:5c:
         88:98:e5:d0:43:7d:64:cf:8f:15:fa:bb:0b:3b:4c:cf:fc:af:
         b6:58:ff:b5:60:d4:7f:49:b6:34:48:95:a2:b7:76:db:5d:99:
         d9:d3:79:b5:6f:59:ae:69:75:e0:5a:ba:ec:14:aa:ce:4e:e7:
         5b:42:7e:07:cc:2c:16:77:7a:e4:2d:8c:7b:f6:cb:61:6a:f4:
         88:fb:1b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:28:13 2025 by rpki-client